$ rpki-client -vvvf rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft File: D6344C556CB88A244AE43DD23D620550C754F24F.mft (raw, json) Hash identifier: zb2+8XtoKN90P32i/V1DudE6E1BZ8bLyIXNbYLbWVP4= Subject key identifier: 0A:2C:DF:3A:F4:8E:0A:5C:77:F3:50:6A:7B:52:58:89:9C:4D:41:2C Authority key identifier: D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F Certificate issuer: /CN=D6344C556CB88A244AE43DD23D620550C754F24F Certificate serial: 1D32EC6B853404A9ADA4BDC90EE9082CBC360480 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 11:01:47 +0000 Manifest this update: Fri 18 Sep 2026 10:56:47 +0000 Manifest next update: Sat 19 Sep 2026 13:22:47 +0000 Files and hashes: 1: D6344C556CB88A244AE43DD23D620550C754F24F.crl (hash: 66Aa8pH7gqN/Pvvu61/Nu0b6St+Xk0DAVzLI+Gg3QQQ=) 2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: ks4tQxKb/HT7mZZsol2xTOY4z3gIixS1lQAzEE6O77U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 04:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:32:ec:6b:85:34:04:a9:ad:a4:bd:c9:0e:e9:08:2c:bc:36:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6344C556CB88A244AE43DD23D620550C754F24F Validity Not Before: Sep 18 10:56:47 2026 GMT Not After : Sep 19 13:22:47 2026 GMT Subject: CN=0A2CDF3AF48E0A5C77F3506A7B5258899C4D412C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:09:0e:cc:1c:b3:fb:be:e9:a4:d5:4a:45:5d: ed:37:d9:ee:31:44:56:d0:18:ef:90:48:08:01:01: 32:8a:1f:72:0e:66:14:99:52:7e:6a:85:4d:44:56: 90:86:67:11:b8:91:f0:a9:d9:13:05:ef:c9:1b:44: 22:28:b4:59:a7:a8:51:b1:b1:a6:6c:d6:a5:0e:7a: 46:57:00:d2:c3:c7:c0:cb:11:00:e7:01:db:cd:de: 36:c4:69:c3:0c:fa:ec:81:72:06:76:4e:13:19:b0: 3f:5e:cb:98:a4:26:19:aa:2a:50:20:8a:c7:d2:2c: ff:f8:42:f1:97:80:8a:82:f7:02:60:d1:a2:bb:8e: a0:ec:83:21:21:ba:29:2a:08:36:0f:69:91:34:d4: a7:1e:ee:1c:7c:9a:0d:71:d3:9b:43:b3:e0:90:2a: ef:81:8b:7d:26:11:ee:f4:63:e0:b2:2c:7e:bd:4d: bb:ef:12:0c:cb:63:da:0b:2c:fe:9f:5a:94:f0:88: bb:1a:42:64:c4:1f:f1:f9:1f:7b:43:cd:4e:58:2b: d4:b3:57:c5:a8:f0:56:3d:5a:d6:72:af:da:0a:ba: c5:31:97:68:2b:76:94:61:42:76:a2:28:89:b9:5f: bb:19:10:e0:36:b4:ce:a5:94:bb:23:d9:32:61:e3: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:DF:3A:F4:8E:0A:5C:77:F3:50:6A:7B:52:58:89:9C:4D:41:2C X509v3 Authority Key Identifier: keyid:D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8a:79:30:19:34:54:82:f7:e7:07:d8:41:14:d3:f0:24:06: d0:d8:ab:81:35:d2:d2:6b:59:34:c8:8b:68:0a:04:03:e9:71: 71:17:36:49:30:99:3f:7d:61:cd:25:0a:05:ce:3c:cd:80:6d: 24:6d:c8:24:d0:53:80:07:16:8b:cf:8a:43:bf:67:4c:6f:66: 9a:e9:2c:cf:07:c2:cd:66:cb:f5:b6:13:36:0f:6e:2b:27:8a: 17:ff:0a:16:e7:d4:4e:48:c8:0f:ba:97:65:c4:d9:c8:03:e9: ae:96:fe:3e:97:e5:10:5b:90:0d:a6:61:c0:de:34:fb:6d:d3: 33:7f:bc:cb:66:a0:d7:a5:6b:2b:bd:f6:76:ec:a8:e1:e6:a5: 20:52:5f:dc:b2:c1:bf:00:b3:b8:35:02:9e:fc:9d:e7:1b:7a: 82:f0:6c:e0:e1:d9:2d:db:75:77:18:bb:28:ec:2f:80:e3:4d: b4:dc:c8:a0:09:a6:4b:23:e7:9f:92:f1:1f:84:3d:88:c7:b8: f7:74:bf:66:32:4f:97:bb:51:e6:a8:ee:50:77:2b:7a:6c:e4: 1a:fd:0a:9a:88:ca:42:ea:7b:f3:fd:4c:07:ce:a0:af:9d:1c: 74:1c:73:5e:b0:b1:c2:ef:2d:94:59:58:41:49:bf:e6:5b:bc: 4b:da:4c:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTLsa4U0BKmtpL3JDukILLw2BIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBD NzU0RjI0RjAeFw0yNjA5MTgxMDU2NDdaFw0yNjA5MTkxMzIyNDdaMDMxMTAvBgNV BAMTKDBBMkNERjNBRjQ4RTBBNUM3N0YzNTA2QTdCNTI1ODg5OUM0RDQxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCQ7MHLP7vumk1UpFXe032e4x RFbQGO+QSAgBATKKH3IOZhSZUn5qhU1EVpCGZxG4kfCp2RMF78kbRCIotFmnqFGx saZs1qUOekZXANLDx8DLEQDnAdvN3jbEacMM+uyBcgZ2ThMZsD9ey5ikJhmqKlAg isfSLP/4QvGXgIqC9wJg0aK7jqDsgyEhuikqCDYPaZE01Kce7hx8mg1x05tDs+CQ Ku+Bi30mEe70Y+CyLH69TbvvEgzLY9oLLP6fWpTwiLsaQmTEH/H5H3tDzU5YK9Sz V8Wo8FY9WtZyr9oKusUxl2grdpRhQnaiKIm5X7sZEOA2tM6llLsj2TJh4/2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCizfOvSOClx381Bqe1JYiZxNQSwwHwYDVR0j BBgwFoAU1jRMVWy4iiRK5D3SPWIFUMdU8k8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcyZDE3NTItNDg1My00Yzc0LWI1NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2 Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBDNzU0RjI0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjM0NEM1NTZDQjg4QTI0NEFFNDNERDIzRDYyMDU1MEM3NTRG MjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1 NTBDNzU0RjI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmKeTAZNFSC9+cH2EEU0/AkBtDYq4E10tJr WTTIi2gKBAPpcXEXNkkwmT99Yc0lCgXOPM2AbSRtyCTQU4AHFovPikO/Z0xvZprp LM8Hws1my/W2EzYPbisnihf/Chbn1E5IyA+6l2XE2cgD6a6W/j6X5RBbkA2mYcDe NPtt0zN/vMtmoNelayu99nbsqOHmpSBSX9yywb8As7g1Ap78necbeoLwbODh2S3b dXcYuyjsL4DjTbTcyKAJpksj55+S8R+EPYjHuPd0v2YyT5e7Ueao7lB3K3ps5Br9 CpqIykLqe/P9TAfOoK+dHHQcc16wscLvLZRZWEFJv+ZbvEvaTA0= -----END CERTIFICATE-----Generated at Fri Sep 18 15:11:45 2026 by rpki-client